Quantum Cyclic Code of length dividing p l + 1 
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Abstract — In this paper, we study cyclic stabiliser codes over 
F p of length dividing p f + 1 for some positive integer t. We 
call these f-Frobenius codes or just Frobenius codes for short. 
We give methods to construct them and show that they have 
efficient decoding algorithms. 

An important subclass of stabiliser codes are the linear 
stabiliser codes. For linear Frobenius codes we have stronger 
results: We completely characterise all linear Frobenius codes. 
As a consequence, we show that for every integer n that divides 
p f + 1 for an odd t, there are no linear cyclic codes of length 
n. On the other hand for even t, we give an explicit method to 
construct all of them. This gives us a many explicit example of 
Frobenius codes which include the well studied Lailamme code. 

We show that the classical notion of BCH distance can be 
generalised to all the Frobenius codes that we construct, including 
the non-linear ones, and show that the algorithm of Berlekamp 
can be generalised to correct quantum errors within the BCH 
limit. This gives, for the first time, a family of codes that are 
neither CSS nor linear for which efficient decoding algorithm 
exits. 

The explicit examples that we construct are summarised in 
Table Hand explained in detail in Tables Hill (linear case) and IIVI 
(non-linear case). 

I. Introduction 

Successful implementation of quantum computing requires 
handling errors that occur while processing, storing and 
communicating quantum information. Good quantum error 
correcting codes are therefore a key technology in the eventual 
building of quantum computing devices, besides, perhaps more 
importantly, their theory provide some elegant mathematics. 
An important class of codes are the stabiliser codes (8), 
which not only captured the isolated examples constructed 
earlier flj], El, El, ED, but built a solid foundation for 
subsequent works (6|, O, 0. 

Constructing stabiliser codes require handling the slightly 
non-standard symplectic inner product. The CSS construc- 
tion 0, lfl5ll gives one elegant and natural way, albeit with 
some loss of generality, to handle this difficulty. For this 
one needs a self-dual code classical code, or more generally 
two classical codes one contained in the dual of the other, 
thereby reusing the intuition built for classical codes. Another 
approach to the problem, again with some loss of generality, is 
to look at linear stabiliser codes (6). Linear stabiliser codes can 
also be characterised as linear classical codes over a quadratic 
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extension of the base field [6, Theorem 3] J51 Lemma 18] 
which are Hermitian self-dual. 

In this article, we study mainly cyclic stabiliser codes. 
Cyclic codes, being well studied classically, have recently been 
studied in detail [6|, ifTBI . (TJ, (9), mostly from the perspective 
of either self dual codes or Hermitian self dual codes. We 
explore another approach to simplify the symplectic condition, 
namely, we restrict our attention of cyclic codes of length 
dividing p* + 1 over ¥ p . 

Our contribution: In this article, we focus on cyclic sta- 
biliser codes over the field F p whose lengths divide p* + 1, 
for some positive integer t. We call such codes t-Frobenius 
codes, or just Frobenius codes, because of the key role played 
by the Frobenius automorphism. Restricting to such lengths, 
while constraining, is not that bad, as there is a healthy, i.e. 
almost linear, density of such lengths. In bargain, we get a 
simpler formulation of the isotropy condition, which helps 
in the analysis of these codes considerably. Furthermore, this 
simplicity of the isotropic condition allows us to extend the 
notion of BCH distance for these codes and give efficient 
decoding algorithms. Since none of the codes that we construct 
are CSS — all our codes are uniquely cyclic (See Section [Till 
for a definition) and by Proposition 1111.51 are not CSS — and 
some of them are non-linear, this gives a family of codes for 
which efficient decoding algorithms were not known before. 

We study the subfamily of linear Frobenius codes in detail 
and completely characterise them (Theorems IIV.4I and IIV. 6b . 
This has two consequence, one negative and another positive. 
Firstly, over F p , we show that there are no i-Frobenius linear 
codes when t is odd (Corollary IIV.51 >. This is a somewhat 
serious limitation of linear cyclic codes as the density of 
such lengths n seems to be almost linear. Moreover, this 
impossibility is purely Galois theoretic unlike other known 
restriction that arise from sphere packing bounds or linear 
programming bounds. 

On the positive side, the characterisation of linear Frobenius 
codes gives us ways to explicitly construct examples of 
linear Frobenius codes of lengths p 2t + 1. Again, since the 
density of such lengths are also healthy, this technique give 
sizable number of explicit examples including the well studied 
Laflamme code. Table Q] give such examples for p = 2 and 
lengths less than 100. 



II. Preliminaries 

We give a brief overview of the notation used in this paper. 
For a prime power q = p k , ¥ q denotes the unique finite field of 
cardinality q. The product F™ is a vector space over the finite 
field F p and an element a = (oi, . . . ,a„) T in it is thought 
of as a column vectors. Fix a p-dimensional Hilbert space 
%. An orthonormal basis for H is of cardinality p. Fix one 
such basis and denote it by {|a)|a £ Fp}. As is standard 
in quantum computing, for an element a = (oi, . . . ,a ra ) T 
in F^, | a) denotes the tensor product |ai) ® . . . ® |a„). The 
set {|a)|a G F™} forms a basis for the n-fold tensor product 
H.® . A quantum code over ¥ p of length n is a subspace of the 
tensor product "H® . There is by now a significant literature 
on quantum codes lilOl . 0,0. 

Let £ denote the primitive p-th root of unity exp — . For 
a and b in F™, define the operators C/ a and Vb on %® as 
t/ a |x) = |x + a) and Vb|x) = £ b x |x) respectively. The 
operator U a can be thought of as a position error and Vb as 
a phase error. In a quantum channel, both position errors and 
phase errors can occur simultaneously. These are captured by 
the Weyl operators U a Vb- 

For elements a and b of the vector space F p l the joint weight 
w (a, b) is the number of positions i such that either ai or hi 
is not zero. The weight of the Weyl operator U a Vb is the 
joint weight w (a, b). Occurrence of a quantum error at some 
t positions is modelled as the channel applying an unknown 
Weyl operator U a Vb of weight t on the transmitted message. 

An important class of quantum codes are the class of 
stabiliser codes [8 1. One can study stabiliser codes by studying 
the isotropic sets under the symplectic inner product. For any 
two vectors u = (a, b) and v = (c, d) of F™ x F?, define the 
symplectic inner product (u, v) as the scalar a d — b T c of 
F p . A subset S of Fp" is called totally isotropic 0, or just 
isotropic, if for any two elements u and v of S, (u, v) = 0. 

Isotropic subspaces of Fp" are closely related to stabiliser 
codes. Calderbank et al 0, were the first to study this 
relation when the underlying field is F2. Later, this was 
generalised to arbitrary fields 0, 1121 . We summaries these 
results in a form convenient for our purposes. 

Theorem II.l ((5), 0, 0). Let S be a isotropic subspace 
of Fp" for some positive integer n. Let uj be either the 
primitive p-th root of unity exp ^ or depending 
on whether p is odd or even respectively. Then, the subset 
S = {w a b /7 a Vb|(a, b) £ S} of unitary operators forms an 
Abelian group. Furthermore, the set of vectors invariant under 
the operators in S forms a quantum stabiliser code and the 
operator P = ^2 UeS U is the projection to it. 

Let S be a subspace of F? n . By the centraliser of S, denoted 
by S, we mean the subspace of all u in Fp", such that (u, v) = 
0, for all v in S. We have the following theorem on the error 
correcting properties of the stabiliser codes. 

Theorem II.2 (0, 0, 0). Let S be a isotropic subspace 
of F? n and let C be the associated stabiliser code. Then the 



dimension of the subspace S is at most n. If S has dimension 
n— k for some k > then the centraliser S, as a vector space 
over Fp, is of dimension n + k and the code C, as a Hilbert 
space, is of dimension p k . Furthermore, if the minimum weight 
min{w (u) |u £ S\S} is d then C can detect up to d— 1 errors 
and correct up to [^"'"J errors. 

Let C be a stabiliser code associated with an n — k dimen- 
sional totally isotropic subspace S of F^". By the stabiliser 
dimension of C we mean the integer k. Similarly, we call 
the weight min{w (u) |u € S \ S} the distance of C. In 
this context, recall that the stabiliser code associated to the 
isotropic set S is called S-pure, if the minimum of the joint 
weights of non-zero elements of the centraliser S is 5. It 
follows from Theorem III. 21 that a <5-pure code is of distance 
at least 5. A stabiliser code over F p of length n, stabiliser 
dimension k and distance S is called an [[n, k, S\] p code. 

III. Quantum Cyclic codes 

In this section we define quantum cyclic codes and study 
some of its properties. Fix a prime p and a positive integer 
n coprime to p for the rest of the section. Let N denote 
the right shift operator over Fp, i.e. the operator that maps 
u = (u\, . . . , u n ) to (u n , Mi, ... , u n -i). Consider the unitary 
operator Af defined as Af\u) — \Nu). Recall that a classical 
code over F p is cyclic if for all code words u, its right shift 
A^u is also a code word. Motivated by this definition, we have 
the following definition for quantum cyclic codes. 

Definition III.l. A quantum code C is cyclic if for any vector 
in C, the vector Af\ip) is in C. 

Let S be a subspace of Fp x Fp. We say that S is 
simultaneously cyclic if for all (a, b) in S, (Na, Nh) is also 
in S. Stabiliser codes with simultaneously cyclic isotropic 
sets were first studied by Calderbank et al |6 Section 5] 
and was taken as the definition of cyclic codes in subsequent 
works lfl6l . U, 0. In this context, we show that for stabiliser 
codes, simultaneous cyclicity and our definition of cyclicity 
coincide. 

Proposition III.2. An isotropic subset of F p l x F^ is simulta- 
neously cyclic if and only if the associated stabiliser code is 
cyclic. 

Proof: For a code C with projection operator P, it is easy 
to verify that C is cyclic if and only if Af^PN = P. Let S 
be an isotropic subset of Fp x Fp and let C be the associated 
stabiliser code. 

Assume that C is cyclic. From Theorem lII.il the projection 
operator to C is given by P — J2( a b)es a a,bU a Vh, where 
a a ,h = Lo aTb . Notice that Af<U a V h Af = U Na V Nb . Therefore, 
the set S should be simultaneously cyclic, otherwise the 
support of Af^PAT will not match with that of P. 

Conversely, if S is simultaneously cyclic, then we have 
(Na., Nh) is in S for all (a, b) in S. The inverse of the shift 
operation N is just N T . Therefore, a T N T Nh — a T b and 



hence the scalars a a b are also preserved. Thus, Af^PAf = P 
and as a result, C is cyclic. ■ 
Let 1Z denote the cyclotomic ring ¥ p [X]/X n — 1 of poly- 
nomials modulo X n — 1. When dealing with cyclic codes, it 
is often convenient to think of vectors of as polynomials 
in 1Z by identifying the vector a = (do, . . . , a n -l) w i m the 
polynomials a(X) = a + . . . + a n _iX" _1 . We use the bold 
face Latin letter, for example a, b etc, to denote vectors and the 
corresponding plain face letter, a(X), b(X) respectively, for 
the associated polynomial. Recall that, classical cyclic codes 
are ideals of this ring 1Z. In the ring 1Z, the polynomial X has 
a multiplicative inverse namely X n . Often, we write X^ 1 to 
denote this inverse. Notice that for any two vectors a and b in 
F™, if a(X) and b(X) denote the corresponding polynomials 
in 1Z, then the coefficient of X k in the product a(X)b(X^ 1 ) 
mod X n — 1 is the inner product & T N k h, where N is the right 
shift operator. An immediate consequence is the following. 

Proposition III.3. Let S be a simultaneously cyclic subset of 
F™ x F™. Then S is isotropic if and only if for any two elements 
u = (a, b) and v = (c, d), the corresponding polynomials 
satisfy the condition 

b{X)c{X- 1 ) - a(X)d(X- 1 ) = modX"-l. 

Let S be a simultaneously cyclic subspace of F™ x F™. 
Define A and B to be the projections of S onto the first and 
last n coordinates respectively, i.e. A — {a|(a, b) € S} and 
B = {b|(a, b) e S}. Since S is simultaneously cyclic, A and 
B are cyclic subspaces of ¥ p and hence are ideals of the ring 
1Z. Let g(X) be the factor of X n — 1 that generates A. Since 
g(X) is an element of A, there exists a polynomial f(X) in 1Z 
such that (g, f ) 6 S. If this f is unique then we say that S is 
uniquely cyclic and call the pair (g(X), f(X)) of polynomials, 
a generating pair for S. We have the following proposition. 

Proposition III.4. A simultaneously cyclic subspace S of¥ p x 
F™ is uniquely cyclic if and only if for every element (0, a) in 
S, a = 0. If S is uniquely cyclic generated by the pair (g, f), 
then every element of S is of the form {ag, af) for some a(X) 
in ¥ p [X]/X n - 1. 

For a CSS code, the underlying isotropic set S is a product 
C\ x Ci of two n-length classical codes over Fp In partic- 
ular, elements (a, 0) and (0,b) for a and b in C\ and Ci 
respectively belong to S. Therefore, we have the following 
proposition as a consequences of Proposition 1111.41 

Proposition III.5. Any uniquely cyclic stabiliser code is not 
CSS unless it is of distance 1. 

For uniquely cyclic codes the isotropy condition in Propo- 
sition [HO] can be simplified as follows. 

Proposition III.6. Let S be a simultaneously cyclic sub- 
space of F2 x F™ with generating pair (g, f). Then S is 
isotropic if and only if g(X)f(X~ 1 ) = g(X )f(X) modulo 
X n — 1. Moreover, any pair (a, b) belongs to S if and only if 
giX^X- 1 ) = a(X- x )/(X) modulo X n - 1. 



Consider a quadratic extension F p 2 = ¥ p (rj) of F p obtained 
by adjoining a root -q of some quadratic irreducible polynomial 
over Fp. Identify the product F" x F™ with the the vector space 
F™2 by mapping a pair of vectors (a, b) to the vector a + 77b. 
Similarly for the cyclotomic ring 7Z, identify the product ring 
1Z x K with the cyclotomic ring 1Z{ri) = ¥ p 2[X]/X n - 1. 
Let S be any isotropic subspace of F™ x F™. The associated 
stabiliser code Cs is said to be linear [6] if S under the above 
identification is a subspace of F™ 2 . Isotropic subspaces of 
F™ x F™ associated to linear stabiliser codes are classical cyclic 
codes of length n over ¥ p (r]). Thus the following proposition 
follows. 

Proposition III.7. Let S be an isotropic simultaneously cyclic 
subspace of the product F™ x F™. The associated stabiliser 
code Cs is linear if and only if S is an ideal of the cyclotomic 
ring ¥ p z[X]/ X n — 1. Furthermore, if Cs is linear then the 
centraliser S is also an ideal of¥ p 2[X]/X n — 1. 

It follows from the theory of classical codes that both S 
and S are ideals generated by factors of X n — 1 over F p 2. In 
this context, we make the following definition. 

Definition III.8 (BCH distance). Let g(X) be a factor of the 
polynomial X n — 1 over the field ¥ q , n coprime to q. The BCH 
distance of the polynomial g(X) is the largest integer d such 
that the consecutive distinct powers . . . 1 (3 t+d ~ 2 are 

roots of g, for some primitive n-th root j3. 

Recall that, the distance of a classical cyclic code is at least 
the BCH distance of its generating polynomial. In the setting 
of stabiliser codes, the distance is related to the minimum 
joint weight of elements of S (Theorem III. 21 ). Motivated by 
this analogy, we define the BCH distance of linear stabiliser 
codes as follows. 

Definition III.9. Let S be a isotropic subset of F™ x F™ 
associated to a linear cyclic stabiliser code C. The BCH 
distance of C is the BCH distance of the generator polynomial 
of the centraliser S. 

We have the following theorem which follows from Theo- 
rem 2L2] 

Theorem 111.10. Let C is be any linear cyclic stabiliser code 
of BCH distance d. Then it is d-pure and hence has distance 
at least d. 

IV. Linear cyclic codes of length dividing p l + 1 

In this section, we study linear cyclic stabiliser codes over 
Fp whose length divides p* + 1. The main motivation to 
restrict our attention to lengths of this form is captured in 
the following proposition. 

Proposition IV. 1. If the integer n divides p l + 1, for some posi- 
tive integer t then X^ 1 in the cyclotomic ring ¥ p [X]/ X p +1 — 
1 is X p . Therefore, for every polynomial g(X) over any 
extension of¥ p we have g(X^ 1 ) is g(X) p . 

The above-mentioned property simplifies the isotropy condi- 
tion for polynomials considerably and allows us to completely 



characterise all linear cyclic codes of such lengths. 

Let ¥ p (f])/¥ p be an extension of degree d. When dealing 
with cyclic quantum codes of length n, we use TZ to denote 
the cyclotomic ring ¥ p [X]/X n — 1, The extension ring 7Z(r)) 
is then the cyclotomic ring F p (r))[X]/X n — 1. Linear codes 
are associated with quadratic extension and identification of 
the pair of vectors (a, b) with a + ?/b maps its isotropic set 
to an ideal of 1Z(rf), 

Lemma IV.2. Let S be the isotropic ideal associated to a 
linear cyclic stabiliser code over ¥ p of length dividing p l + 1. 
Then S is uniquely cyclic. 

Proof: Let ¥ p (ri)/¥ p be the quadratic extension such that 
S is an ideal of the cyclotomic ring ¥ p {rf)[X] / {X n — 1). 
Let A 2 + ciX + c + be the minimal polynomial of rj over 
¥ p . 

Recall that the projection of S onto the first n co-ordinates 
forms a classical cyclic code over ¥ p and hence is generated 
by a factor <?(A) of X n — 1. Suppose there exist two distinct 
elements (g, f ) and (g, f ') in S. Let h = f - f ' so that (0, h) 
is also in S. We prove that the polynomial h(X) = modulo 
X n — 1. By the Chinese remaindering theorem, it is sufficient 
to prove separately that all roots of x -1 and g are roots of 
h. a 

From Proposition llV. 11 we get, g(X~ x ) — g p (X). Applying 
Proposition 1111.31 to the elements (0, h) and (g, f ) we have 
g p h = mod X n — 1. Since g is invertible modulo x ~ 1 , 
every root of x ~ 1 should also be a root of the polynomial 
h(X). 

We now show that every root of g is also a root of h. Since 
r/h belongs to S, if the code is linear then r/ 2 h = —coh—rjCih 
must also belong to S where r\ is a root of the quadratic 
polynomial X 2 + c\X + cq. Any element in S is of the 
form ag + r/b, where a(X) and b(X) are polynomials in 
¥ p [X]/X n — 1. Hence, — c$h — ag and every root of g is 
also a root of h. ■ 

Consider the Frobenius automorphism u on a degree d 
extension ¥ p (rf)/¥ p which maps any element a in F p (r/) 
to aP. This can be naturally extended to polynomials over 
¥ p (ri) and therefore on TZ(rj) as follows: For a polynomial 
a{X) = oq + . . . + a n X n where dj are in ¥ p (rj), cr(a) is 
defined as cr(ao) + . . . + <j(a n )X n . We call this the Frobenius 
involution. 

Constructing linear cyclic codes correspond to constructing 
generators for the associated isotropic ideal. We make use 
of the following Galois theoretic lemma to characterise such 
generators. 

Lemma IV.3. Let the integer n divide p + 1 for some positive 
integer t. 

1) Any irreducible factor of X n — 1 over ¥ p other than the 
factors X — 1 or X + 1 has even degree. 

2) Let f(X) be any irreducible factor of X n — 1 over ¥ p 
whose degree is divisible by d for some positive integer 
d. Over the extension field¥ p d = ¥ p (r]), /(A) splits into 
d irreducible factors fo(X, if), ... , fd-\{X, rj) such that 



ft = o*(f ). 

Proof of part 1: Consider any irreducible factor f(X) 
of X n - 1 over ¥ p other than X - 1 or X + 1. Let k be 
the degree of f(X). Then, the splitting field of f(X) over ¥ p 
is ¥ p k. Consider any root j3 of /(A) in ¥ p k. The Frobenius 
automorphism a 1 is a field automorphism of ¥ p k and cr* (/?) = 
P p . Notice that /3 is an n-th root of unity and n divides p t + l. 
Hence cr*(/3) = ^ and /(/3" 1 ) = o"*(/(/3)) = 0. Since 
f(X) is neither X — 1 nor X + 1, we have (3 ^ ±1 and hence 
j3 7^ /3 _1 . As a result, the roots of f(X) comes in pairs; for 
every root /3 its inverse is also a root. Hence, the degree 
k of f(X) should be an even number. ■ 

Proof of part 2: Consider any irreducible factor f(X) 
of X n — 1 of degree k — dm for some positive integer m. 
Its splitting field ¥ p k — ¥ p d m therefore, contains ¥ p d. Any 
irreducible factor of f(X) over ¥ p d should be of degree equal 
to the degree of the extension ¥ p k /¥ p d which is m. The 
Frobenius a being a field automorphism of ¥ p d, should map 
these factors to each other. Further, order of a in ¥ p d is d. 
Thus f(X) = f (X,T)) ■ . . . ■ a^ifoiX^)) over F p2 . ■ 
Consider the extension field ¥(r]) = ¥ p 2 and let S be 
any ideal of H(r)). The following theorem gives a necessary 
condition for it to be isotropic and hence give a linear cyclic 
code. 

Theorem IV.4. Let ¥ p (r]) be a quadratic extension of¥ p . Let 
n divide p +1 and S be an isotropic ideal of¥ p (rj) [X]/X n — 
1. Then t is even and the ideal S is generated by the product 
polynomial g(X) ■ h(X 1 rj) where g(X) and h(X,r]) are two 
coprime factors of X n — 1 satisfying the following condition. 

1) g(X) is any factor of X n — 1 over ¥ p which contains 
both X — 1 and X + 1 as factors. 

2) h(X, r/) is any factor of — ^ 1 over ¥ p 2, such that 
for any irreducible factor r(X, rf) of x -1 over ¥ p 2, 
r(X,r)) divides h(X,rj) if and only if a(r) — r(X,rf) 
does not 

Proof: From Lemma IIV.2I it follows that S is uniquely 
cyclic. Let (g, f) be a generating pair for S where g(X) 
and f(X) are polynomials over F p . Then the polynomial 
g(X) + r)f(X) is an element of the ideal S. It follows from 
the linearity of S that the polynomial rj{g + rjf) is also in S. 
However, the set S is uniquely cyclic. Using Proposition IIH. 41 
there is a polynomial a(X) in F P [X] such that 

V{9 + Vf) = a (.9 + Vf) mod X n - 1 (1) 

Let c(X) = X 2 + c\X + Co be the minimal polynomial of 
rj over F p where cq and c% are elements of F p . Comparing the 
coefficients of 77 in Equation [T] we have 

/ = -—g mod AT" -land (2) 
Co 

vn _ 1 

c{a{X)) = mod . (3) 

9 

When n divides p l + 1, for any polynomial 7(A) in the 
cyclotomic ring F p [A]/A™ - 1, 7 (A- 1 ) is just j pt (X). Since 



S is isotropic, from Equation|2]and Proposition lHI. 3| its follows 
that gP t+1 a pt = g p±+1 a mod X n - 1. The polynomial g(X) 

is invertible modulo x ~ 1 . As a result we have, 

g 

a pt = a mod (4) 

9 

Let r(X) be any irreducible factor of x ~ x over F p and K 
be the extension field ¥ p [X)/r(X). From Equation|3]we have, 
a mod r is a root of the polynomial c(Y) over the extension 
field K. If possible, let t be an odd integer 2m+ 1. Since c(Y) 

2m 2m i — ■ 

divides Y p —Y,a p = a mod r. Using Equation |4| we 
get a p = a modulo r and hence a mod r is an element of 
the sub field F p of K. However, this is a contradiction, since 
the polynomial c is irreducible over ¥ p . Therefore, t must be 
even. 

Recall that a mod r is a root of the polynomial c(Y) over 
the extension field IK. This implies that the extension field IK 
contains ¥ p [Y]/c(Y) = ¥ p 2. Therefore, degree of r must be 
even and g must have as factors all the odd degree irreducible 
factors of X n — 1 over F p . By Lemma HV. 31 these odd degree 
factors are just X — 1 and X + 1. Thus g satisfy property Q] 
of the theorem. 

Consider the polynomial h(X, 77) = gcd ^ x ~ 1 , 1 — ^<ij- 
Clearly h is coprime to g(X). We claim that g ■ h generates 
the ideal S. To see this, notice that S as a subspace of 
F™ x F^ is uniquely cyclic and is generated by the pair 
(g, /), where / = — -f^g modulo X n — 1 (using Equation [2]). 
Therefore, S as an ideal is also generated by the polynomial 
gcd — X, g (l — which is the product g ■ h. We 

claim that polynomial h thus constructed satisfies the proper- 
ties mentioned in the theorem. Any irreducible factor r(X) of 
x -1 over the field F B is of even degree and hence factorises 

g p b 

as ri(X, rf)a(ri(X, rff) over ¥ p (r}). Recall that a mod r is a 
root of c(Y). As a result, a mod n is either r\ or 77'. Now, r\ 
divides h if and only if 1 — 3- a modulo r*i is zero. Therefore, 
ri divides h if and only if a = 77' mod r\ . The polynomial a 
has coefficients in ¥ p and hence a — a(a). As a result by the 
third property of Proposition lA.il a = rf mod r\ if and only 
if a — cr(rj') — i] mod er(ri). For each pair r\ and o(r\), 
exactly one of them divide h depending one whether a is r\ 
or 77' modulo r\. This proves the theorem. ■ 
A corollary of the above theorem is the following impossi- 
bility result. 

Corollary IV.5. Let n be any integer that divides p* + 1, where 
t is odd. Then there does not exist any linear cyclic stabiliser 
codes of length n over ¥ p . 

For example, 9,11,19,27,33,43,57,59,67,81,83,99 are 
the numbers less then hundred that divide 2* + 1 for some 
odd t. Hence there is no binary linear cyclic code of such 
lengths. 

The next theorem shows that the conditions in Theorem lIV.4l 
are also sufficient to construct isotropic ideals of H{rj). This 
gives us a way of constructing linear cyclic stabiliser of 
length dividing p 2m + 1. This theorem directly follows from 



a more generalised construction given in Theorem IV. II and 
Theorem IV.5I 

Theorem IV.6. Let n divide p 2m + 1 and ¥ p (r]) be a quadratic 
extension of¥ p . Let g(X) and h{X,rf) be factors of X n — 1 
satisfying the properties Q] and [2] of Theorem \IV.4\ Then the 
ideal S of¥ p (rj)[X]/X n — 1 generated by the product g ■ h is 
isotropic as a subset of F™ x F™ and the associated stabiliser 
code is linear and cyclic. 

In the rest of the article, we refer to cyclic stabiliser codes 
whose length divide p l + 1 as t-Frobenius codes. For linear 
2m-Frobenius codes, we call the factorisation g(X) ■ h(X,rj) 
characterised above as the canonical factorisation associated 
to the code. 

Theorem IV.7. Let C be a linear 2m-Frobenius code over 
F p with canonical factorisation g ■ h. The stabiliser dimension 
of the code C is deg(g). The centraliser S of S is the ideal 
generated by h{X,rf) and hence the BCH distance of C is 
BCH distance of h. 

Again the proof follows from the more general theorem |V7] 
andlV31 

V. Generalisation to nonlinear codes 

We have already shown that if n divides p f + 1 for some odd 
integer t then no linear code of length n exists. In this section 
we show how to construct nonlinear codes of such length. The 
construction is a generalisation of Theorem IIV.6I The major 
difference is that the extension of ¥ p is no longer restricted to 
be quadratic. 

Theorem V.l. Let n divide p dm + 1 and ¥ p (rj) be a degree 
d extension of¥ p . Let g(X) and h(X, 77) be co-prime factors 
of X n — 1 satisfying the following properties. 

1) g(X) is any factor of X n — 1 over ¥ p which contains 
all the the irreducible factor of X n — 1 over ¥ p whose 
degree is not divisible by d. 

2) h(X,rj) is any factor of ~ l over ¥ p {vi) such that 
for any irreducible factor r(X, 77) of — over ¥ p (rf), 
r(X, 77) divides h(X, 77) if and only if none of the factors 
a(r), a d -\r) divide h i.e. = H*z£ a l (h). 

Fix any nonzero a in ¥ p and let a(X, 77) be the polynomial, 
uniquely defined by Chinese remaindering, as follows. 

_ J 1 mod g 

1 a l (arj) mod a l (h) for all < i < d 

Then a(X, 77) is a polynomial in ¥ P [X] and the uniquely cyclic 
subspace generated by (<?, 017) is isotropic. 

The proof of this theorem, involves verifying certain equa- 
tions modulo X n — 1. Almost always we do this in by verifying 
the said equation separately modulo g and each irreducible 
factor r(X,rf) of — ~ x . Then by Chinese remaindering, we 
have the said equation modulo X n — 1. We call this the Chinese 
remainder verification. 



Let us call the polynomial X g ^x) as /(^0- From the 
definition of the factor h(X, rj) it follows that over ¥ p (rj), 
the polynomial f(X) splits as h ■ cr(h) ■ ■ ■ a d ~ 1 (h). 

Claim V.2. The polynomial a(X, rf) is a polynomial in ¥ p [X] 

Proof: It is sufficient to prove that a (a) = a. Notice 
that since a = 1 mod g, a (a) = a mod g. Using Proposi- 
tion \AA\ it is sufficient to show that a(a) = a mod /. Since 
<j d (h) = h and a = a l (arj) mod a l (h) for all i, applying u 
on both side we get a(a) = a 1 (arj) mod er l (/i) for all i. By 
Chinese remainder verification the claim follows. ■ 

Claim V.3. a(X) = apf -1 ) mod f(X) 

Proof: From Proposition II V. 1 1 we have, a(X ) = 
o"*(a(X)) mod X n - 1. We know, a = a^arf) mod a l (h). 
Since a* (oaf) — on], applying <r* on a we get a 1 (a) — a l (arj) 
mod a l (h). Hence by Chinese remaindering, cr*(a) = a 
mod /. ■ 

Claim V.4. The uniquely cyclic subspace generated by the 
pair (g, ag) is isotropic. 

Proof: Using Proposition IIII.6I it is is sufficient to prove 

that 

g(X)a(X- 1 )g(X- 1 )-g(X- 1 )a(X)g(X) = mod X n -1. 

(5) 

Clearly Equation [5] holds modulo g(X) as both the terms are 
divisible by g. From Proposition II V. 1 1 and Equation IV.3I we 
have, a(X^ x ) = a modulo X g 1 ■ We then apply Chinese 
remaindering and conclude that the subspace is isotropic. ■ 
The following theorem shows that the linear codes obtained 
from Theorem IIV.6I are indeed a subclass of the codes gener- 
ated from Theorem lV.il 

Theorem V.5. Let c(X) = X 2 + c\X + cq be an irreducible 
polynomial over ¥ p and r), rf be roots of c(X). Fix d = 2, 
¥p(j]')/¥ p to be the extension and a = —c^ 1 in Theorem W.H 
and let S be the corresponding isotropic subspace. Then the 
image of S under the map (u, v) t- > u + rjv is an ideal of 
the cyclotomic ring ¥ p (i])[X]/(X n — 1) and its generator is 
given by the polynomial g(X)h(X,rj) where g,h satisfies the 
properties in Theorem \IV.4\ Moreover the centraliser S also 
maps to an the ideal generated by h. 

Proof: We know from Theorem IV. II that the polynomial 
a(X,rj) defined by the following 

a = cr^-c^V) m °d where i <E {0, 1} (6) 

belongs to the ring ¥ p [X]/g(X) and the uniquely cyclic 
subspace S generated by the pair (g,ag) is isotropic. 

To prove that S maps to an ideal it is sufficient to show that 
for any element (ug, uag) in S there exists another element 
{vg, vag) in S such that ri(ug+rjuag) = v+r/vag mod X n — 
1. We claim that we can always choose v — c$au to satisfy 
this condition. 

Claim V.6. rj(g + r/ag) — coa(g + r/ag) mod X n — 1 



Proof: The cyclotomic polynomial X n — 1 is product of 
g,h and a(h). Using equation [6] and the fact that cq = rjr)', 
—rj 2 = c\r\ + Co it is straight-forward to verify the claim 
separately modulo g(X), h and a{h). Then by Chinese 
remaindering conclude that it is true modulo X n — 1. ■ 
Equation [6] implies that for any irreducible factor r(X, rf) 
of over ¥ p (rj) 

i f ~ V 1 if r \h 
a mod r = < _i (7) 
L -c ?] if r\a(h) 

Now g(X, rf) = (g + r/ag) is a generator of S as an ideal 
and equation [7] imply that if r\h then g mod r is zero and if 
r\a(h) then g mod r is + 1 which is nonzero. Therefore 
gcd(X" — 1, g) = gh and gh is also a generator of S. 

Let / be the ideal generated by 1+rja. Since gcd(X n — 1, 1 + 
rja) — h, the ideal / is also generated by h. We know that 
a(X) = aiX- 1 ) mod ^1 (see proof of Claim E3). By 
Proposition lIH.6l it can be verified that any element of the form 
(it, ua) belongs to the centraliser. Since S itself is an ideal, / 
is a subideal of S. To show that / is actually S we show that 
they have same cardinality. The cardinality of / is (p 2 ) n - de 9\ h ) 
which is equal to p n+de 9(g) 5 since deg(g) + 2deg(/i) = n. 
On the other hand cardinality of S is p n_de s(s). Hence by 
Theorem cardinahty of S is p n + d ^a) . ■ 

As before, we call g ■ h as the canonical factorisation 
associated with the above mentioned i-Frobenius codes. We 
also call the BCH distance of h to be the BCH distance of C. 

Theorem V.7. Let g(X) ■ h{X,r}) be the canonical factorisa- 
tion associated with a t-Frobenius code C as in Theorem \V.1\ 
The stabiliser dimension of C is deg(g). If the BCH distance 
of h is S then C is S-pure and hence has distance at least S. 

Proof: Let a(X) be the polynomial corresponding to C 
such that the isotropic subspace S of C is generated by the pair 
(g,ag) as in Theorem IV. 1 1 Since any element in S is of the 
form (ug, uag), the number of distinct values u can take is the 
cardinality of the ring ¥ p [X]/g(X) which is p»- dc s(9). Hence 
by Theorem III. 21 we conclude that the stabiliser dimension of 
C is deg(sO 

To prove the lower bound on distance we first need the 
following result 

Claim V.8. Any element in the centraliser S is of the form 
[u, au + v — g" 1 ) f or some polynomials u(X) and v(X) over 
¥ p such that g(X) and v(X) are coprime. 



Proof: Let A be the set of all pairs (u,au + v 




where u(X) and v(X) are polynomials over ¥ p such that v(X) 
is coprime to g(X). It follows from Proposition IIII.6I that the 
set A is contained in S. However, the cardinality of A is the 
product of the cardinalities of the rings ¥ p [X]/(X n — 1) and 
¥ p [X]/g(X) which is p «+ dc s(9)_By TheoremHO] cardinality 
of S itself is p «+dcg( 3 ) Hence S is equa i to the set ^ a 

Notice that the joint weight of a pair (u'(X), v'(X)) is 
equal to the weight of arju' — v' as a polynomial over ¥ p (rj). 
We know, for any factor r(X,rf) of X n — 1, weight of any 



polynomial over F p (ry) which is a multiple of r, is at least 
the BCH distance of r. Therefore, to prove that C is <5-pure 
it is sufficient to show that for any element (u',v') in the 
centraliser S the polynomial h(X, rj) is a factor of ai]u' — v'. 
By Claim [V~8l we know that there exists a polynomials v such 
that v' = au' + v x ~ 1 . Since h divide x g —1 and a = a?/ 
mod h, it follows that arju' — 1/ mod /i = 0. ■ 
As a demonstration of our construction we list (Table Q) 
some explicit examples of codes where the characteristic p 
of the underlying finite field is 2. The distance given in this 
table is the BCH distance. The actual distance can be larger. 
Canonical factors and their roots are given in the appendix. 
We have both linear and non-linear codes for parameters with 
dagger whereas star denotes only nonlinear codes. 



Length 


Parameters 


5 


[[5,1,3]] 


9 


[[9,3,3]]* 


13 


[[13,1,5]] 


17 


[[17,1,7]] , [[17,9,3]] 


19 


[[19,1,3]]* 


25 


[[25,1,4]] , [[25,5,3]] 


27 


[[27,21,2]]*, [[27,9,3]]* 


29 


[[29,1,5]] 


37 


[[37,1,5]] 


41 


[[41,1,7]] , [[41,21,4]] 


53 


[[53,1,7]] 


57 


[[57,21,5]]*, [[57,39,3]]* 


61 


[[61,1,7]] 


65 


[[65,5,13]]*, [[65,13,8]] , [[65,17,9]], [[65,17,11]]* , 
[[65,29,7]]t , [[65,41,5]]t , [[65,53,3]]+ 


67 


[[67,1,7]]* 


81 


[[81,21,4]]*, [[81,75,2]]* 


97 


[[97,1,9]] , [[97,49,5]] 


99 


[[99,69,3]]* 



TABLE I 

Explicit examples of Frobenius codes over F 2 
VI. Decoding 

Let C be a t-Frobenius code based on a degree d extension 
Fp(ry) as in Theorem lV.il Let the code C have length n and 
BCH distance 5 = 2r + 1. Much like in the classical case, 
we show that there is an poly(n) time quantum algorithm to 
correct any quantum error of weight at most r. We use two key 
algorithms: (1) Kitaev's phase estimation [12, 5.2] algorithm 
and (2) The Berlekamp decoding algorithm ifTTl p-98,6.7] for 
classical BCH codes. 

Theorem VI. 1 (Berlekamp). Let h(X) be a factor of X n - 1 
of BCH distance S = It + 1 over a finite field ¥ q , q and n 
coprime. Let e{X) be any polynomial of weight at most r over 
¥ q . Given a polynomial r{X) — e(X) mod h{X), there is a 
polynomial time algorithm to find e{X). 

Let the canonical factorisation of the C be g ■ h so that 
its isotropic subspace is generated by the pair (g,ag) where 
a = o- l (ai]) mod a l (h). Assume that we transmitted a 
quantum message \<p) £ C over the quantum channel and 
received the corrupted state \ip) = U u V v \ip), where the vectors 
u and v are unknown but fixed for the rest of the section. We 
show that using quantum phase finding we can recover the 
polynomial ai]u(X^ 1 ) — v(X~ 1 ) mod h without disturbing 



Provided the joint weight w(u, v) < r we can now 
find u and v using Berlekamp algorithm. The sent message 
is recovered by applying the inverse map V^U^ on \ip). 
Hence we have the following theorem about decoding linear 
t-Frobenius codes. 

Theorem VI.2. Let C be a t-Frobenius code, as in Theo- 
rem \V.1\ of length n and BCH distance 5 = 2r + 1. There is 
quantum algorithm that takes time polynomial in n to correct 
errors of weight at most r. 

Proof: Let S be the isotropic subspace corresponding to 
C. We need the following lemma to prove the theorem. 

Lemma VI.3. Let \ip) be a codeword in C and = 
U u V v \ip), where u and v are any vectors in F™. There 
is an efficient quantum algorithm which, given the state 
\tp) and any element (a, b) in S, computes the polynomial 
b(X)u(X~ 1 )-a(X)v(X~ 1 ) mod X n — 1 without destroying 

IV>>- 

Proof: Recall that for every (a, b) in S and \<p) in C, the 
operator W a i, = u: a h U a Vb stabilises \<p) (Theorem III. H . 
Suppose the received vector is = U u V v \ip). It is easy to 
verify that the vector \ip) is an eigen vector of the operator 
W a ,b an d me associated eigenvalue is £ b u ~ a v where £ is 
the primitive p-th root of unity. One can recover this phase 
without disturbing |^) using quantum phase finding. Repeat- 
ing the algorithm with (N k a, N k h), all the inner products 
b T /V fc u — a T 7V fc v can be recovered. These are precisely 
the coefficients the polynomial b(X)u(X~ 1 ) - b(X)v(X^ 1 ) 
modulo X n — 1. Hence proved. ■ 
Let C be based on a degree d extension ¥ p (r)) as in 
Theorem IV. 1 1 Let the canonical factorisation associated with 
C be g(X) ■ h{X,rj). The isotropic subspace S of C is 
generated by the pair (g,ag) where a — a l (arj) mod a l (h). 
Using Lemma [Vl. 31 we can compute the polynomial e'(X) = 
a(X)g{X)u{X- 1 ) - giX^X" 1 ) mod X n - 1. The factor 
g(X) has an inverse g^ 1 {X) in the ring F p [X] / X g ^x) Le - 
go -1 = 1 mod x ~ 1 . Since h is a factor of — -1 and 
a = ar\ mod h, multiplying e' by g and taking modulo 
h we get the polynomial e(X,rj) — a-qu^X^ 1 ) — v(X^ 1 ) 
mod h(X, vi). 

Remember that for any vector u = (uq, . . . ,u n -i) in F™ 
we have i^JT^ 1 ) = u'(X) where u' = (uq, u n -i, . . . , u\). 
Hence the joint weight w of the pair (u, v) is same as the 
weight of the polynomial e(X, rj). Since the BCH distance 
of h is 2r + 1, if w is at most r then using Berlekamp 
algorithm (Theorem IVI.ll i we can compute the polynomial 
e and therefore the vectors u and v. Applying VJU^ on 
we recover the original codeword. ■ 

VII. Density of numbers that divide p* + 1 

Let f p (x) denote the number of positive integers less than 
x such that n — 1 = p* mod n for some t, i.e. 

f p (x) = #{n < x\3t n — 1 = p mod n} 
= < x\3t p l — —1 mod n} 



h{x) 




lcm = 2 x 10* 
Fig. 1. Density of good lengths for characteristic 2 



For p = 2 we have / 2 (100,000) = 12741 of which 6641 
lengths divide 2* + 1 for an even exponent t and the rest 66100 
for an odd exponent t. Figure Q] gives plot of fi (x) for x in 
the range [0, 10 5 ] and Table UT1 gives some explicit values. 



X 


f2(x) 


fm 


fSip) 


10 


2 


1 


1 


100 


23 


11 


12 


1,000 


189 


101 


88 


10,000 


1521 


790 


731 


100,000 


12741 


6641 


6100 



TABLE II 

Values of f2(x) 



We believe that the density is of f p (x) the form 
although the plots look linear. We show a weaker lower bound 



Claim VII.l. For any prime p, f p (x) > c p ^|- 
a constant that depends only on p. 



where c p is 



Proof: Fix a characteristic p of the base field. Let us 
estimate only the prime lengths n that are good, i.e. primes n 
such that p l — — 1 mod n. When n is also a prime, if p has an 
even order say 21 in the group Z/nZ* then p e = — 1 and hence 
n is good. In particular, if p is a quadratic non-residue modulo 
n then n is good. First consider the case when p = 2. Using 
quadratic reciprocity, we have 2 is a quadratic non-residue if 
and only if n = 3 or 5 mod 8. Therefore, the density /2PO 
is at least the density of primes in the arithmetic progression 
3 mod 8 (or for that matter 5 mod 8). We can now use the 
density version of Dirichlet's theorem on prime numbers in 
AP. 



On the other hand if p is odd then again using quadratic 
reciprocity we have 



(8) 



Pick any quadratic non-residue 1 < f3 < p — 1 modulo p. 
Then, from Equation [8] n is good if it simultaneously satisfies 
the equations. 



j3 mod p 
1 mod 4 



(9) 



Using Chinese reminder theorem, we can find an element 
no satisfying Equation [9] and coprime to Ap such that 1 < 
no < Ap. Therefore, all n that is no modulo Ap are good. The 
result then follows by using the density version of Dirichlet's 
theorem. ■ 

VIII. Conclusion 

In this paper, we studied cyclic stabiliser codes of length 
dividing p* + 1 over ¥ p . It is natural to ask whether the 
construction can be generalised for arbitrary code length. For 
higher degree extensions the gap between actual and BCH 
distance could be significant. Therefore, it would be interesting 
to find a better lower bound and in particular to know whether 
Berlekamp like algorithms can be used to decode up to that 
bound. Unlike previous definition of cyclicity, our definition 
is applicable to non-stabiliser codes as well. An open problem 
is to construct cyclic non-stabiliser codes. 



References 



[i] 



[3] 
[41 



S. A. Aly, A. Klappenecker, and P. K. Sarvepalli. On quantum and 
classical bch codes, see http://arXiv.org/abs/quant-ph/0604102, 2006. 
[2] V. Arvind and K. R. Parthasarathy. A family of stabilizer codes based 
on Weyl commutation relation over a finite field. Volume in honor of 
C.S. Seshadri's 70th birthday, pages 133-153, 2003. Preprint quant- 
ph/0206174. 

A. Ashikhmin and E. Knill. Nonbinary quantum stabilizer codes, see 
http://arxiv.org/abs/quant-ph/0005008, 2000. 

C. H. Bennett, D. P. DiVincenzo, J. A. Smolin, and W. K. Wootters. 
Mixed-state entanglement and quantum error correction. Phys. Rev. A, 
54:3824-3851, 1996. 
[5] A. R. Calderbank, E. M. Rains, P. W. Shor, and N. J. A. Sloane. Quantum 
error correction and orthogonal geometry. Physical Review Letters, 
78(3):405^108, January 1997. 
[6] A. R. Calderbank, E. M. Rains, P. W. Shor, and N. J. A. Sloane. Quantum 
Error Correction Via Codes Over GF(4). IEEETIT: IEEE Transactions 
on Information Theory, 44, 1998. 
[7] A. R. Calderbank and P. W. Shor. Good quantum error-correcting codes 

exist. Physical Review Letters A, 54:1098-1105, 1996. 
[8] D. Gottesman. A class of quantum error-correcting codes saturating the 

quantum hamming bound. Physical Review A, 54:1862-1868, 1996. 
[9] A. Kefkar, A. Klappenecker, S. Kumar and P. K. Sarvepalli. Nonbi- 
nary stabilizer codes over finite fields, see http://arxiv.org/abs/quant- 
ph/0508070v2, 2005. 
[10] E. Knill and R. Laflamme. A theory of quantum error correcting 
codes. Physical Review letters, 84:2525-2528, 2000. Preprint quant- 
ph/9604034. 

[11] R. Laflamme, C. Miquel, J. P. Paz, , and W. H. Zurek. Perfect quantum 
error correcting code. Phys. Rev. Lett., 77:198, 1996. 

[12] M. A. Nielsen and I, L. Chuang. Quantum computation and quantum 
information. Cambridge University Press, 2000. 

[13] P. W. Shor. Scheme for reducing decoherence in quantum computing 
memory. Phys. Rev. A, 52:2493-2496, 1995. 



[14] A. M. Steane. Error correcting codes in quantum theory. Phys. Rev. 
Lett., 77:793, 1996. 

[15] A. M. Steane. Multiple particle interference and quantum error correc- 
tion. Proceedings of the Royal Society A, 452:2551-77, 1996. 

[16] A. Thangaraj and S. W. McLaughlin. Quantum codes from cyclic codes 
over GF(4 m ). IEEE Transactions on Information Theory, 47(1): 1 176— 
1178, 2001. 

[17] J. H. van Lint. Introduction to Coding Theory, volume 86 of Graduate 
Texts in Mathematics . Springer- Verlag, New Yorklnc, 3 rd edition, 1998. 



Appendix 

Proof of Proposition IIII.2I 

Proof of Lemma Hv!21 

Frobenius involution 

The Frobenius involution satisfies few properties which are 
crucial in many of our proofs. 

Proposition A.l. Let a denote the Frobenius involution on the 
ring of polynomials over the quadratic extension W p (r))/¥ p . 
Then 

1) Let rf be the conjugate rf of r\ then for polynomials 
a(X) and b(X) over ¥ p we have a(a + i]b) = a + rj'b. 

2) Any a(X,T]) in F p (ry) is a polynomial over ¥ p if and 
only if a (a) — a. 

3) Let a, b and g be polynomials over V p (rj) then a = b 
mod g if and only if a (a) — a(b) mod cr{g). 

Explicit examples of linear Frobenius codes 

We now demonstrate our construction for the case when the 
characteristic p of the underlying finite field is 2. Tables Hill 
and|IV|give some explicit codes for all lengths n less than 100 
which is a factor of 2 dm + 1 for some m where d is either 2 or 
3. When d = 2 the codes are all linear and for d = 3 they are 
non-linear. Recall that for a t-Frobenius code with canonical 
factorisation g ■ h, it is necessary for both X + 1 and X — 1 
to divide g. However, since 1 and —1 are the same in F2, the 
polynomial g needs to have only the factor X— 1. The notation 
used in the tables are the following: Let f3 denote any fixed 
primitive n-th root of unity. Roots of any degree / irreducible 
factor of X n — 1 over F„ are exactly ^ .../3 fc « for some 
k, where I is the smallest positive integer such that kq l = k 
mod n. Call this factor f q> k- Let the polynomials gu and hk 
in the tables denote f2,k and f 2 d k respectively. Notice that 
go = X — 1 and in case of d = 2, for any k ^ 0, gk. — h^h^k 
where cr(hk) = /i2fc- Similarly in case of d = 3 if degree of 
gk is divisible by 3 then gk — hkh,2kh^k- The distance given 
in these tables is the BCH distance. The actual distance can 
be larger. 



m 


Canonical factors 


Roots of h 


Code 


1 


9o 


hi 




-,/3 3 


[[5,1,3]] 


3 


SO 


h 2 


/? 5 ,...,/3 8 


[[13,1,5]] 


2 


9o 


h 2 h 6 


/? 6 ,. 


•,/3 n 


[[17,1,7]] 




9091 


h<i 


/3 6 ,...,/3 7 


[[17,9,3]] 


5 


9a 


hih 5 


/? 4 ,...,/3 6 


[[25,1,4]] 




9095 


h 2 


/3 2 ,. 


-,/3 3 


[[25,5,3]] 


7 


90 


hi 


/3 4 ,. 


■,/3 7 


[[29,1,5]] 


9 


9a 


hi 




-,/3 12 


[[37,1,5]] 


2 


9a 


hike 


/3 14 , 


..,/3 19 


[[41,1,7]] 




9091 


h :i 




..,/? 13 


[[41,21,4]] 


13 


9a 


h 2 


/3 18 , 


..,/? 23 


[[53,1,7]] 


15 


9a 


h 2 


/3 28 , 


■•,/3 33 


[[61,1,7]] 




9agi 


htih,7hioh 22 h 2 Q 


/3 22 , 


..,/3 28 


[[65, 13,8]] 


3 


9o9u9i3 


h 2 h§hghia 


/3 29 , 


,.,/3 36 


[[65, 17,9]] 




3097911313 


h 2 hehio 


/3 30 , 


..,/3 35 


[[65,29,7]] 




9o9s979i 1913 


h 2 h e 


031, 


..,/3 34 


[[65,41,5]] 




9091939597913 


h 22 


/3 22 , 


■•,/3 23 


[[65,53,3]] 


12 


90 


hihi 


/3 33 , 


..,/3 40 


[[97,1,9]] 


9091 


h 7 


/3 37 , 


..,/3 40 


[[97,49,5]] 



TABLE III 

Linear cyclic stabiliser codes of length dividing 4 m + 1 over F 2 



m 


Canonical factors 


Roots of h 


Code 


1 


90 93 


hi 


/3 4 ,.. 


-,/3 5 


[[9,3,3]] 


2 


90 


hi 




,/? 7 


[[13,1,3]] 


3 


90 


hi 


$*,.. 


,/3 10 


[[19,1,3]] 


3 


9099 


hihi 2 


I3 12 ,. 


•,/3 15 


[[27,3,5]] 


3 


909991 


hl 2 


/3 15 ,. 


.,/3 15 


[[27,21,2]] 


3 


909993 


hi 


/3 22 ,. 


•,/3 23 


[[27,9,3]] 


6 


90 


hi 


/3 32 ,. 


•,/3 34 


[[37,1,4]] 


3 


90919 


h4,hi 2 h 2 Q 


/3 25 ,- 


•,/3 32 


[[57,3,9]] 


3 


9091995 


hihi 2 


/3 27 ,. 


•,/3 30 


[[57,21,5]] 


3 


909199395 


hi 


/3 28 ,. 


•,/3 29 


[[57,39,3]] 


10 


90 


hi 


/3 29 ,- 


•,/3 32 


[[61,1,5]] 


2 


90913 


hihi 2 h 2 oh 2 gha 


/3 27 ,. 


•,/3 38 


[[65, 5, 13]] 


2 


90913911 


h4hi 2 h 2 oh 2 $ 


/3 28 ,. 


•,/3 37 


[[65, 17, 11]] 


2 


90913919395911 


h 2 s 


/3 36 ,. 


.,/3 37 


[[65,53,3]] 


2 


9091397911 


hihi 2 h 2 o 


/3 30 ,. 


•,/3 35 


[[65, 29, 7]] 


2 


9o9i395979ll 


/14/112 


/3 31 ,. 


•,/? 34 


[[65,41,5]] 


2 


90913939597911 


h4 


/3 32 ,. 


•,/3 33 


[[65,53,3]] 


11 


90 


hi 


/3 31 ,. 


•,/3 36 


[[67,1,7]] 


9 


9092793 


hl/136 


/3 44 ,. 


.,/3 46 


[[81,21,4]] 


9 


909279193 


h-j.fi 


/3 45 ,- 


•,/3 45 


[[81,75,2]] 


9 


9092799 


h 4 h 12 


«66 o69 


[[81,9,5]] 


9 


909279399 


h 4 


/3 76 ,- 


• ) P 


[[81,27,3]] 


8 


90 


h 2 h 20 


/3 51 , ■ 


•,/3 55 


[[97, 1,6]] 


8 


9091 


h 2 o 


I3 77 ,- 


o7S 


[[97,49,3]] 


8 


9095 


h 4 


/3 48 ,...,/3 49 


[[97,49,3]] 


5 


9093999159339195 


ha 


/3 55 ,- 


•,/3 55 


[[99,93,2]] 


5 


90939991593391911 


h 5 


/3 85 ,. 




[[99,69,3]] 


5 


90939991593395911 


}%4 


/3 67 ,. 


.,/? 68 


[[99,69,3]] 



TABLE IV 

Non-linear cyclic stabiliser codes of length dividing 8 m + 1 over F2 



